Medium severity5.3NVD Advisory· Published Sep 16, 2022· Updated Jun 17, 2026
CVE-2022-37709
CVE-2022-37709
Description
Tesla Model 3 V11.0(2022.4.5.1 6b701552d7a6) Tesla mobile app v4.23 is vulnerable to Authentication Bypass by spoofing. Tesla Model 3's Phone Key authentication is vulnerable to Man-in-the-middle attacks in the BLE channel. It allows attackers to open a door and drive the car away by leveraging access to a legitimate Phone Key.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6- cpe:2.3:o:tesla:model_3_firmware:11.0:*:*:*:*:*:*:*
- Tesla/mobile appdescription
- Range: v4.23
Patches
Vulnerability mechanics
References
2- fmsh-seclab.github.ionvdExploitTechnical DescriptionThird Party Advisory
- youtu.be/cPhYW5FzA9AnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.